A group of top security analysts and researchers say the latest Windows security hole, for which there is no patch, leaves hundreds of millions of Windows Vista PCs wide open for infection by a Conficker-like Internet worm.